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DETAILED ACTION 

1 . This is in response to the communication filed on 09/1 8/2008. 

2. Claims 1-11, 19-24 and 29 are pending in the application. 

3. Claims 8-1 1 are allowed. 

4. Claims 6-7 are objected. 

5. Claims 1-5, 19-24 and 29 have been rejected. 

Response to Arguments 

6. The applicant's arguments regarding previous 35 USC 1 12 second paragraph type rejections 
are fully considered. The previous 35 USC 1 12 second paragraph type rejections of claims 22-24 are 
withdrawn because of the amendments made to the claims. The previous 35 USC 1 12 second 
paragraph type rejections of claims 1-11 and 19-21 are withdrawn based on the applicant's 
arguments, however, the examiner notes, the amendments made to claims 1-7 and 19-21 raised new 
grounds for objections to claims (please see the office action below). 

7. The applicant's arguments regarding the previous 35 USC 101 type rejections are fully 
considered. The previous 35 USC 101 type rejections of claims 1-11 and 19-21 are withdrawn. 
However, upon further consideration, invention set forth by claims 22-24 was found to be non- 
statutory, and the previous 35 USC 101 type rejections of claims 22-24 are maintained (Please see 
the office action below for detail explanation). 

8. The applicant's arguments regarding previous 35 USC 103(a) type rejections are fully 
considered, however, found not persuasive. In particular, upon further consideration, combination of 
the cited references Gentry et al' 885, Boneh et al and Gentry et al' 554 was found to teach the 
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limitations set forth by claims 1-5, 19-21 and 29 (please see the office action below for detail 
explanations). 

Claim Objections 

9. Claims 1-7 and 19-21 are objected to because of the following informalities: 

Regarding claim 1-7 and 19-21, they recite the limitations such as "computes first, second 
and third verification parameters as the product of a second secret, with respectively, said shared 
secret, the second element and the first element;" or "computing first, second and third verification 
parameters as the product of the second secret with said shared secret, said second element and said 
first element respectively". However, it is not clear whether such parameters are representative of 
three different products, or whether only the first parameter is a product of second secret with said 
shared secret , and second and third verification parameters are just second and first elements 
respectively! Therefore, meets and bounds of the claims are unclear! Appropriate correction is 
required. 

Claim Rejections - 35 USC 8 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or any 
new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and requirements of this 
title. 

9. Claims 22-24 are rejected under 35 USC 101 because the claimed invention is directed to 
non- statutory subject matter. 

Regarding claims 22-24, they are directed to an apparatus comprising means plus functions. 
However, according to the specification (please see Par 0069 and 0117), all of the claimed "means 
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for" can be optionally implemented in computer program or software alone. Therefore, claimed 
invention is considered to be non-statutory as being directed to a program per se product. See MPEP 
2106.01 

Claim Rejections - 35 USC $ 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 
of this title, if the differences between the subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 

10. Claims 1-5, 19-21 and 29 are rejected under 35 USC 103 (a) as being unpatentable over 
Gentry et aT 554 (US 2003/ 0182554 Al) in view of Bonehetal (US 2003/0081785A1) further in 
view of Gentrvetar 885 (US 2003/0 179885 A 1). 

Regarding claims 1, Gentry et al '554 discloses a method/ computer program product of 
enabling a third party to verify an association between a first party associated with a first element, of 
a first algebraic group, and a second party associated with a second element, of a second algebraic 
group, formed from an identifier string of the second party using a hash function, and there being a 
computable bilinear map for the first and second elements; wherein a second party computer entity, 
acting on behalf of the second party: 

receives a shared secret (Fig 4: step 414: shared secret g ab , or Fig 5: interactive shared 
secret abP) provided by the first party as the product of a first secret and the second element (Fig 
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4,5; Par 0024, 0030, 0033; receiving interactive shared secret elements/ component from the first 
entity); 

computes first ( Fig 4, Fig 5; symmetric key from g ab , or abP ), second ( Fig 4, Fig 5; second 
random element b) and third (Fig 4, Fig 5; first intermediate shared secret g a ' or aP) verification 
parameters as the product of a second secret with said shared secret ( Fig 4, Fig 5; interactive shared 
secret g ab , or abP) , the second element (Fig 4, Fig 5; second random element b) and the first 
element (Fig 4, Fig 5; first intermediate shared secret g a ' or aP) respectively ( Fig 4 and Fig 5; Par 
0024, 0030, 0033) 

outputs the first, second and third verification parameters (Fig 4 and Fig 5; Par 0024-0025, 
0030-0033; outputting interactive shared secret, second and first intermediate shared secret 
components). 

Gentry et al '554 fails to disclose expressly the first, second and third verification parameters 
for use by the third party in proving the association between the first and second parties . 

However, Boneh et al discloses the first, second and third verification parameters for use by 
the third party in proving the association between the first and second parties (Par 0046, 0053, 0060- 
0063; PKG conducting authentication/ bilinear mapping based on parameter, master key, and ID). 

Furthermore, Gentry et al' 885 discloses the first, second and third verification parameters 
for use by the third party in proving the association between the first and second parties (Par 0049- 
0053; 0085, 0135-0136). 

Gentry et al' 885 , Boneh et al and Gentry et al '554 are analogous art because they are from 
the same field of authentication based on identity and bilinear mapping . At the time of invention, it 
will be obvious to a person of ordinary skill in the art to combine the teaching of Boneh et al ands 
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Gentry et al' 885 with Gentry et al '554 to use the first, second and third verification parameters for 
use by the third party in proving the association between the first and second parties in order to 
provide a alternative third party authentication. 

Regarding claim 2, it is rejected applying same as above applied rejecting claim 1, 
furthermore, Boneh et al discloses method a wherein the second party generates a further shared 
secret from the second secret and an identifier string of a fourth party, the second party passing this 
further shared secret to the fourth party for use by the latter as the private key of a public/private key 
pair the public key of which is formed by the identifier string of the fourth party (Par 0046, 0053, 
0060-0063; association between multiple parties based on plurality of ID's and private keys). 

Regarding claim 3, Gentry et al '554 discloses a method wherein the first and second parties 
are respectively parent and child trusted authorities in a hierarchy of trusted authorities (Par 0003, 
0004; trusted party). 

Regarding claim 4, Gentry et al '554 discloses a method wherein the first and second 
algebraic groups are the same (Par 0019; algebraic groups). 

Regarding claim 5, Gentry et al '554 discloses a method wherein the first and second 
elements are points on the same elliptic curve (Par 0019; elliptic curves) 

Regarding claim 19, it recites the limitations of claim 1, therefore, it is rejected applying as 
above rejecting claim 1, furthermore, Gentry et al '554 discloses apparatus arranged to enable a third 
party to verify an association between the apparatus and a first party that has a first secret and is 
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associated with a first element of a first algebraic group, the apparatus being associated with a 
second element, of a second algebraic group, and the first and second elements being such that there 
exists a bilinear mapping p for these elements; the apparatus comprising: 

a memory for holding a second secret and an identifier string associated with the apparatus 
(Par 0010-001 1; system memory for storing secret, and identifying string, parameters), 

means for forming said second element from said identifier string using a hash function (Par 
0010, 0022,0041; processor for computing hash functions), 

means for receiving from the first party a shared secret based on said first secret and said first 
element, and for storing this shared secret in the memory (Par 0010-001 1; communicating second 
entities, or PKG), 

means for computing first, second and third verification parameters as the product of the 
second secret with said shared secret, said second element and said first element respectively (Fig 4; 
Fig 5; Par 0030-0033, 0041; processor/ system/ PKG for receiving first random secret, second 
random secrets and system parameter; outputting interactive shared secret, second and first 
intermediate shared secret components) 

Gentry et al '554 fails to disclose expressly means for making available said identifier string 
and said verification parameters to the third party. 

However, Boneh et al discloses means for making available said identifier string and said 
verification parameters to the third party (Par [0053]-[0063]; PKG knowing and receiving secrets 
and components). 

Furthermore, Gentry et al' 885 discloses means for computing first, second and third 
verification parameters as the product of the second secret with said shared secret, said second 
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element and said first element respectively (Par 049-053; 068-071, 085, 135-0136; verification 
parameter, and root key derived using shared secret). 

Regarding claims 20-21, they recite the limitations that already addressed in rejecting 
claims 1-5 and 19, therefore, they are rejected applying as same as applied above rejecting claims 1- 
5 and 19. 

Regarding claim 29, it recites the limitations of claim 1, therefore, it is rejected applying as 
above rejecting claim 1, furthermore, Gentry et al '554 discloses a method of enabling a second 
party to prove to a third party the existence of an association between the second party and a first 
party, the first party being associated with a first element of a first algebraic group, the second party 
being associated with a second element, of a second algebraic group, formed from an identifier 
string of the second party using a hash function, and there being a computable bilinear map for the 
first and second elements; wherein a second-party computer entity, acting on behalf of the second 
party: 

(1) receives a shared secret (Fig 4: step 414: shared secret g ab , or Fig 5: interactive shared 
secret abP) provided by the first party as the product of a first secret and the second element (Fig 
4,5; Par 0024, 0030, 0033; receiving interactive shared secret elements/ component from the first 
entity); 

(2) computes: (i) a first verification parameter as the product of a second secret with said 
shared secret (Fig 4, Fig 5; Par 0024, 0030, 0033; computing symmetric key from g ab , or abP), (ii) a 
second verification parameter as the product of the second secret with the second element (Fig 4, Fig 
5; Par 0024, 0030, 0033; second random element b), and (iii) a third verification parameter as the 
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product of the second secret with the first element (Fig 4, Fig 5; Par 0024, 0030, 0033; computing 
first intermediate shared secret g a ' or aP). 

Gentry et al '554 fails to disclose expressly the first, second and third verification parameters 
for use by the third party in proving the association between the first and second parties . 

However, Boneh et al discloses the first, second and third verification parameters for use by 
the third party in proving the association between the first and second parties (Par 0046, 0053, 0060- 
0063; PKG conducting authentication/ bilinear mapping based on parameter, master key, and ID). 

Furthermore, Gentry et aV 885 discloses the first, second and third verification parameters 
for use by the third party in proving the association between the first and second parties (Par 0049- 
0053; 068-071, 0085, 0135-0136; verification parameter, and root key derived using shared secret). 

Allowable Subject Matter 

1 1 . Claims 8- 1 1 are allowed. 

12. Claims 6 and 7 are objected to as being dependent upon a rejected base claim, but would be 
allowable if rewritten in independent form including all of the limitations of the base claim and any 
intervening claims. 
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Conclusion 

13. Examiner's note: Examiner has cited particular columns and line numbers in the references as applied to the 
claims above for the convenience of the applicant. Although the specified citations are representative of the teachings in 
the art and are applied to the specific limitations within the individual claim, other passages and figures may be applied 
as well. It is respectfully requested from the applicant, in preparing the responses, to fully consider the references in 
entirety as potentially teaching all or part of the claimed invention as well as the context of the passage as taught by the 
prior art or disclosed by the Examiner. Finally, for any future amendments to claims, the applicant is respectfully 
requested to incorporate the paragraph numbers from the specification upon which the support for such amendments 
were obtained. 

14. THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for response to this action is set to expire in 3 (Three) 
months and 0 (Zero) days from the mailing date of this letter. Failure to respond within the 
period for response will result in ABANDOMENT of the application (see 35 U.S.C 133, 
M.P.E.P 710.02(b)). 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Shanto M Z Abedin whose telephone number is 571-272-3551. The examiner 
can normally be reached on M-F from 8:30 AM to 6:30 PM. If attempts to reach the examiner by 
telephone are unsuccessful, the examiner's supervisor, Moazzami Nasser, can be reached on 571 - 
272-4195. The fax phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. The RightFax number for faxing directly to the examiner is 571-273- 
3551. 



Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information about the PAIR 
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system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Shanto M Z Abedin 
Examiner, AU2436 
/Carl Colin/ 

Primary Examiner, Art Unit 2436 



